www.yahoo.com - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned www.yahoo.com and returned a unknown verdict (score -12). The page resolved to 183.177.68.210 on Yahoo-AU in AU. 43 domains and 2 IPs were contacted, over 52 HTTP requests. 210 malware samples communicate with this URL (Container, RedLine). The request followed 1 redirect before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://geocities.com/ - Domain: www.yahoo.com · IP: 183.177.68.210 · AS10310 · AU
- Server: ATS
- Page title: Yahoo | Mail, Weather, Search, Politics, News, Finance, Sports & Videos
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Oct 7 23: · subject C=US, ST=New York, L=New York, O=Yahoo Holdings Inc., CN=*.www.yahoo.com
- Evidenced operator: Yahoo Holdings Inc.
- HTTP requests captured: 52
- Scan tier: fast · observed 2026-08-19 11:12:24 UTC
Redirect chain
https://geocities.com/https://www.yahoo.com/
Malware communicating with this URL (210)
These samples were observed contacting or being served from www.yahoo.com. Each links to its full analysis.
- Container - referenced ·
2354ebbc46d03f39904bcf863a413c15· first seen 2026-08-19 - Container - referenced ·
4d9c536806d58a49a8aa53a4574eadf8· first seen 2026-08-19 - Container - referenced ·
42a5171db73d7fb6714c6ee3638b94be· first seen 2026-08-18 - Container - referenced ·
2ad3d5d371cdc3ec04f595eeca0fb29c· first seen 2026-08-19 - RedLine - referenced ·
004305631229981a288b6285f4031377· first seen 2026-08-19 - Container - referenced ·
66b38ca61d22841b8df5a2416946dcee· first seen 2026-08-19 - Container - referenced ·
47d72f30063e61699521d78b463d3fcc· first seen 2026-08-19 - Container - referenced ·
1c8dd068142c4e63f041b1f1b8d4f9b4· first seen 2026-08-19 - Container - referenced ·
431318020ce80c4beb4c61242bc05ee2· first seen 2026-08-19 - Container - referenced ·
3182e3ef63fd99fcf81d154ca869ff74· first seen 2026-08-19 - RedLine - referenced ·
61c98b345926304d6554a3b77f2abc49· first seen 2026-08-19 - RedLine - referenced ·
1d75fc2ed7f4de69920f9c73eef3039d· first seen 2026-08-19 - Container - referenced ·
79b06debc112e2ef2fc42870da69136b· first seen 2026-08-19 - Container - referenced ·
8b442406b8974d1fe623f38778bbf988· first seen 2026-08-19 - Container - referenced ·
2e48b5476613b6baefe6a2b4d3e0bb51· first seen 2026-08-19
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Next.js
Contacted infrastructure
- 183.177.68.210 - AS10310 Yahoo-AU (Australia)
- 76.223.84.192 - AS16509 Amazon.com, Inc. (United States)
Observed indicators
- www.yahoo.com
- consent.cmp.oath.com
- udc.yahoo.com
- nexus-gateway-prod.media.yahoo.com
- s.yimg.com
- geo.yahoo.com
- cdn.taboola.com
- securepubads.g.doubleclick.net
- finance.yahoo.com
- sports.yahoo.com
- mail.yahoo.com
- health.yahoo.com
- shopping.yahoo.com
- tech.yahoo.com
- x.com
- facebook.com
- instagram.com
- www.youtube.com
- www.tiktok.com
- www.yahooinc.com
Other scans of www.yahoo.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
Questions about www.yahoo.com
- Is www.yahoo.com safe?
- The scan of www.yahoo.com on 19 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.yahoo.com?
- 210 analysed samples communicate with this URL, including Container, RedLine.
- How was www.yahoo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.yahoo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan